Re: conditional forwarding configuration issues

Tech-Archive recommends: Fix windows errors by optimizing your registry

Herb,

I understand your need for stating the obvious, however, this is my best
method for "easy" security by obscurity to limit internet access. If any of
the users using the few machines (maybe 100) that I am "locking down
internet access through DNS" were able to figure out how to get around this,
wonderful, more power to them. I don't have the luxury or the human
bandwidth to configure 80 some firewalls (as this is my environment) to
limit this the "right" way...but thank you for your comments anyway...

ISA server is way overkill as well.

I will work on the stub zone solution, that sounds good.

thanks

Marty



"Herb Martin" <news@xxxxxxxxxxxxxx> wrote in message
news:ukOzOC%23aFHA.3808@xxxxxxxxxxxxxxxxxxxxxxx
>> Create these Stub Zones:
>> ups.com
>> fedex.com
>> akadns.net
>> ups.com.akadns.net
>> fedex.com.akadns.net
>
> That is an excellent idea.
>
> I don't like what he's doing this for, but it is the best
> answer to the question he is asking.
>
>
> --
> Herb Martin, MCSE, MVP
> Accelerated MCSE
> http://www.LearnQuick.Com
> [phone number on web site]
>
> "Kevin D. Goodknecht Sr. [MVP]" <admin@xxxxxxxxxxxxxx> wrote in message
> news:eQBICN9aFHA.3848@xxxxxxxxxxxxxxxxxxxxxxx
>> In news:%23E6Ss16aFHA.1504@xxxxxxxxxxxxxxxxxxxx,
>> Marty Peterson <mpeterson@xxxxxxxxxxx> posted this:
>>
>> > 1.) Set up conditional forwarding for fedex.com and ups.com to point
>> > to a DNS server that is configured to forward to my ISP for
>>
>> > Can anyone tell me how I can resolve only the zones that are on the
>> > DNS server and my conditional forwarding domains, but yet not resolve
>> > anything else? This is my goal. (I do NOT want to manually try to
>> > keep a fedex.com secondary zone up to date and fedex.com doesn't
>> > allow zone transfers)
>>
>> Create these Stub Zones:
>> ups.com
>> fedex.com
>> akadns.net
>> ups.com.akadns.net
>> fedex.com.akadns.net
>>
>>
>> --?
>> Best regards,
>> Kevin D4 Dad Goodknecht Sr. [MVP]
>> Hope This Helps
>> ===================================
>> When responding to posts, please "Reply to Group"
>> via your newsreader so that others may learn and
>> benefit from your issue, to respond directly to
>> me remove the nospam. from my email address.
>> ===================================
>> http://www.lonestaramerica.com/
>> ===================================
>> Use Outlook Express?... Get OE_Quotefix:
>> It will strip signature out and more
>> http://home.in.tum.de/~jain/software/oe-quotefix/
>> ===================================
>> Keep a back up of your OE settings and folders
>> with OEBackup:
>> http://www.oehelp.com/OEBackup/Default.aspx
>> ===================================
>>
>>
>
>


.

Relevant Pages

  • Re: conditional forwarding configuration issues
    ... > Create these Stub Zones: ... >> DNS server and my conditional forwarding domains, but yet not resolve ...
    (microsoft.public.windows.server.dns)
  • Re: Internet - Intranet DNS
    ... This will resolve everything on your AD domain. ... For Internet access configure forwarders and list your ISP's DNS server as ...
    (microsoft.public.win2000.dns)
  • Re: Whats the best practice for a dns setup?
    ... stub zone in the root zone. ... if every DNS server can find every other DNS ... Stub zones are essentially "secodaries without all the records"; ... Suppose that the WAN from Rio is 'physically' along ...
    (microsoft.public.windows.server.dns)